Security Bulletin

RISK: Medium Risk

Microsoft Windows Media Player Memory Corruption Vulnerability ( 13 October 2010 )

A remote code execution vulnerability exists in the way that the Windows Media Player deallocates objects during a reload operation via a Web browser. This vulnerability could allow code execution if a user visits a specially crafted Web page. If a user is logged on with administrative user...

Last Update Date: 28 Jan 2011 Release Date: 13 Oct 2010 5397 Views

RISK: Medium Risk

Microsoft Windows Media Player RTSP Use After Free Vulnerability ( 13 October 2010 )

A vulnerability exists in Microsoft Windows Media Player Network Sharing Service that could allow a remote user to send a specially crafted network packet to an instance of the application's network streaming service and cause remote code execution in the context of the current application.

Last Update Date: 28 Jan 2011 Release Date: 13 Oct 2010 5496 Views

RISK: Medium Risk

Microsoft Windows MFC Document Title Updating Buffer Overflow Vulnerability ( 13 October 2010 )

A remote code execution vulnerability exists in the way that window titles are managed in applications written using the Microsoft Foundation Class (MFC) Library. While the vulnerability is located in MFC and is present on affected operating systems, it can only be exploited if a remote...

Last Update Date: 28 Jan 2011 Release Date: 13 Oct 2010 5421 Views

RISK: Medium Risk

Microsoft Windows Embedded OpenType Font Integer Overflow Vulnerability ( 13 October 2010 )

A remote code execution vulnerability exists in the way that Microsoft Windows Embedded OpenType (EOT) font technology parses certain tables in specially crafted embedded fonts. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control...

Last Update Date: 28 Jan 2011 Release Date: 13 Oct 2010 5389 Views

RISK: Medium Risk

Microsoft Windows Kernel Mode Drivers Multiple Vulnerabilities ( 13 October 2010 )

1. Win32k Reference Count VulnerabilityAn elevation of privilege vulnerability exists due to the way that the Windows kernel-mode drivers maintain the reference count for an object. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install...

Last Update Date: 28 Jan 2011 Release Date: 13 Oct 2010 5393 Views

RISK: Medium Risk

Microsoft SharePoint Multiple Vulnerabilities ( 13 October 2010 )

1. HTML Sanitization VulnerabilityAn information disclosure vulnerability exists in the way that HTML is filtered that could allow an attacker to perform cross-site scripting attacks and run script in the security context of the logged-on user.2. HTML Sanitization VulnerabilityAn information disclosure vulnerability...

Last Update Date: 28 Jan 2011 Release Date: 13 Oct 2010 5408 Views

RISK: Medium Risk

Microsoft Windows COM Validation Vulnerability ( 13 October 2010 )

A remote code execution vulnerability exists in the way that the Windows Shell and WordPad validate COM object instantiation. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data...

Last Update Date: 28 Jan 2011 Release Date: 13 Oct 2010 5361 Views

RISK: Medium Risk

Microsoft Windows Common Control Library Heap Overflow Vulnerability ( 13 October 2010 )

A remote code execution vulnerability exists in the way that the Windows common control library renders specially crafted Web sites when using a third-party scalable vector graphics (SVG) viewer. This vulnerability could allow code execution if a user visited a specially crafted Web page. ...

Last Update Date: 28 Jan 2011 Release Date: 13 Oct 2010 5383 Views

RISK: Medium Risk

Microsoft Office Excel Multiple Vulnerabilities ( 13 October 2010 )

1. Excel Record Parsing Integer Overflow VulnerabilityA remote code execution vulnerability exists in the way that Microsoft Excel handles specially crafted Excel files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, ...

Last Update Date: 28 Jan 2011 Release Date: 13 Oct 2010 5368 Views

RISK: Medium Risk

Microsoft Office Word Multiple Vulnerabilities ( 13 October 2010 )

1. Word Uninitialized Pointer VulnerabilityA remote code execution vulnerability exists in the way that Microsoft Word handles an uninitialized pointer when parsing a specially crafted Word file. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install...

Last Update Date: 28 Jan 2011 Release Date: 13 Oct 2010 5535 Views